SamTrexler
asked on
How to request a 2048-bit trusted certificate in Oracle Wallet Manager 3.0?
We are in the midst of an upgrade from Oracle IAS 10g (9.0.2) to 10.1.2 and then on to Fusion Middleware 11g, to be completed this summer. However, our customer is requiring us to support Discoverer Plus 9.0.2 on Windows 7 before Windows XP is desupported on April 8. The solution seems to be to change from JInitiator to use the Sun JRE, and this works well - except that the application is not trusted and JRE 7U51 throws a nasty warning on every execution.
I'd like to generate a trusted certificate for the server, but the Oracle Wallet Manager in this version will only generate a CSR up to 1024 bit strength, and our CA, Entrust, won't accept a request for anything less than 2048 bit strength. And I'm not really wanting to become my own CA using Oracle Certificate Authority for this simple short-term need, unless there is a very simple setup and procedure for what I need to do. Time is short, and I need to keep it simple.
Can anyone point me to a way to create the necessary cert request? Or is there a better solution until I get the next version running?
Thanks,
Sam Trexler
I'd like to generate a trusted certificate for the server, but the Oracle Wallet Manager in this version will only generate a CSR up to 1024 bit strength, and our CA, Entrust, won't accept a request for anything less than 2048 bit strength. And I'm not really wanting to become my own CA using Oracle Certificate Authority for this simple short-term need, unless there is a very simple setup and procedure for what I need to do. Time is short, and I need to keep it simple.
Can anyone point me to a way to create the necessary cert request? Or is there a better solution until I get the next version running?
Thanks,
Sam Trexler
ASKER
The OS is Windows 2000, which we are also moving away from quickly - but that won't be completed in time. This box does not have IIS installed, unfortunately, because it uses the Oracle HTTP server (based on Apache).
Could we simply install a small, lightweight tool to generate the cert? What would be a good tool for this?
Thanks.
Could we simply install a small, lightweight tool to generate the cert? What would be a good tool for this?
Thanks.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks, I'll take a look at that.
You can generate a 2048 using the SSL built into IIS 7.